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Foreword 


Minister for Public Expenditure and Reform 
Michael McGrath T.D. 


The last two years forced our global community to demonstrate the 
powerful use of data. During this turbulent time data was the one 
uniting factor. It allowed the Government to produce and deliver 
the Digital Covid Certificate and the Covid19 Data Hub. It brought 
about the establishment of cross-Government outcome-oriented 
teams. All working in tandem, guiding how we reacted to a global 
emergency. 


With this renewed respect for data, it is my pleasure to present 
the first annual report of the Data Governance Board. When | last 
spoke about the Data Sharing and Governance Act | commented 
on the progressiveness and positive outcomes it would bring; and 
as | consider the events since that first announcement | am pleased 
by the growing support and the greater use of data at every level 
across the Public Service. 


Ireland has consistently shown its willingness to be prepared to 
provide stronger and more innovative public services. We work 
diligently to ensure that Ireland is an exemplar and European leader 
in the use of data by aligning with the EU’s Digital Decade and the 
Berlin Declaration and we welcome the positive challenges the 
forthcoming EU Data Act will bring. The rollout of the National Data 
Infrastructure aims to turn data into insights for decision makers. It 
highlighted the importance of aligning data to national priorities for 
individuals, business and places. Ireland has always strived to be a 
leader in this arena. 


One of the five pillars of the Public Service Data Strategy 2019 
-2023 is ’Data as an Enabler’ with the strategy specifically 
highlighting the need to facilitate increased data sharing and 
innovative use of data across all public bodies. One of the driving 
forces behind this was the establishment of the Data Governance 
Board. The Board now meets regularly and plays a pivotal role in the 
delivery of data governance across the Public Service. 


| am confident the Board’s continued success will help our 
Government to make the most effective use of data, whilst 
upholding the privacy and transparency that citizens deserve. 


Mikel Me Groth 


Michael McGrath, TD 
Minister for Public Expenditure and Reform 
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Foreword 


Data Governance Board 


We the Data Governance Board are pleased to have been part of a process that has enabled Ireland to be at 
the forefront of the drive for focused and transparent data sharing. Our efforts will help to enhance the Public 
Service's reputation as a highly trusted custodian of public data. 


Like the rest of the world at the time, the Data Governance Board (the Board) started its journey separated 
from other key stakeholders in data stewardship. Because of that distance, it meant having to rely heavily on 
others to help us achieve our immediate goals. For that reason we would like to begin this report by thanking 
each Public Service Body (PSB) that has engaged with us so far. They did so during an unprecedented time 

on top of their day-to-day activities. The effort undertaken by them to align with The Data Sharing and 
Governance Act 2019 has ensured that the disclosure of data is more streamlined and efficient. We particularly 
would like to thank the data officers and data protection officers across the Public Service who have afforded 
their time and knowledge to support our ongoing work. The important work carried out by them will play a 
pivotal role in the future success of this modern data sharing framework. 


The Board would also like to thank our former members Anne Rooney and Paul Sweetman for the time and 
expertise they contributed to this important body of work. 


Since its establishment, the Board has met six times. In addition to maintaining a strong focus on our legal 
obligations to the Minister of Public Expenditure and Reform the Board considered the necessary underpinning 
frameworks required to support a modern ‘data eco-system’ for Irish citizens. 


The establishment of Data Sharing and Data Architecture and Technical committees has allowed for 
pan-Government collaboration on important issues and topics that support the work of the Board. 


The Public Service has been working steadfastly to meet their obligations in accordance with the Data Sharing 
and Governance Act and as such we intend to focus our attention for the remainder of 2022 to ensure that 

all submitted data sharing agreements are reviewed. This work will be bolstered by the support of the Data 
Sharing Committee. 


Essential scaffolding such as data ethics, data principles and virtual data spaces have been at the forefront 

of our long term goals to ensure that personal information is handled in a consistent manner; with risks and 
inclusion considered each time data is shared. This puts the right to privacy and data protection at the heart of 
how services are designed and delivered. 


For the year ahead, we endeavour to keep building trust through transparency and openness by expanding 
the suite of data governance aids and continuing our research into the data scaffolds for use across the Public 
Service. 


We believe that progressing these initiatives will sustain a trusting relationship between the government and 
citizens. 


Our outlook is positive. 


We welcome the challenges that may arise in our effort to leverage the use of data across Government and 
beyond. 


The Data Governance Board 
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The Data Sharing 
and Governance 
Act 2019 


Data Governance Board 


A Brief History 


The Public Service Data Strategy 2020-2023 clearly defines a single narrative and direction for the use of 
data across the Public Service. The strategy envisions an integrated Public Service environment where well- 
governed data and data management leads to enriched digital services for citizens and data sharing is very 
much part of this. 


Data sharing in general is a de facto part of the Public Service; with a vast range of organisations in its total 
make up it is essential in order to provide everyday services to citizens. The Data Sharing and Governance 
Act 2019 (the Act); enacted on 4 March 2019, gives further effect to the General Data Protection Regulation 
2018 (GDPR) and Data Protection Act 2018. It specifically clarifies the rules and exceptions of sharing citizens 
personal data between public bodies and gives surety and legality to those bodies wishing to begin disclosing 
or receiving data. 


Tranche 3 


Bill passed final commencement 
March 2019 16th December 2022 


Published 
June 2018 


Tranche 1 
commenced April 2019 Tranche 2 
commenced July 2021 


The Act was published in June 2018, passed in March 2019 and several sections of the legislation were 
immediately commenced. The second tranche of commencements in July 2021 allowed for establishment of 
the Data Governance Board. 


The third and final commencement in December 2022 will enact the final section of the legislation, section 6 
(2) and (3). Once this section is commenced; it will remove the legal basis for the disclosure of personal data as 
defined in section (38) of the Data Protection Act 2019. 
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What does the Act actually allow for? 


The Act is a substantial piece of legislation. It covers everything from the establishment of the Data 
Governance Board to the establishment of base registries. It sets out how to share personal data and provides 
for the regulation of the management of all information across the Public Service. The essence of this 
legislation is the layer of transparent governance provided by the Data Governance Board and the framework 
for sharing data; which differentiates it from other data sharing and processing legislation. 


VY 


It defines data sharing as the It requires that a public body It only permits data sharing 
disclosure of information, has lawfully obtained the when it is carried out 
including personal data, by a data concerned in the first in accordance with the 
public body to another public instance. provisions of the Act. 

body. It includes data of the 

deceased in its remit. 


In short, the Data Sharing and Governance Act legally permits the sharing of personal data, under particular 
rules and procedures. The introduction of the Act along with the dedicated support of the Data Governance 
Board and the Data Governance Unit in the Office of the Government Chief Information Officer (OGCIO) 
intends to enhance data sharing in general across the Public Sector. 


The Act endeavours to assist PSBs by enabling the: 


8 Establishment of the new Data Governance Board and advisory committees to assist in the 


Q Q Q review of all data sharing arrangements relevant to the Act. 


Development of standards and guidelines for PSBs to follow that support a comprehensive, 
transparent environment for all data sharing arrangements relevant to the Act. 


Creation of a standard and legally compliant data sharing agreement template to be used 
for data sharing from one public body to another. 


Investigation into the use of virtual data spaces for the combination of large-scale datasets 
for analysis. 


Exploration of the role of data ethics as part of a modern and transparent data eco-system. 
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Good Digital Government 


Good Digital Government starts with an analysis of the citizen’s ability to navigate life events online and 
recognising that for many public services not all online journeys are the same. If an approach is adopted 
that takes into consideration this understanding it not only identifies a wide range of new opportunities for 
technology adoption but also highlights new data streams and obstacles that should be explored. 


Difficulty in 
understanding data 
legislation in general. The 
multiple different strands 
of legislation that affect 
data, its management and 
sharing can be a complex 
environment to navigate. 


The ability to improve 
customer service because 
of data sharing remains a 
major goal and benefit of 
the Act. 


Data needs to 

be both available 
and of sufficient 
quality to support 
evidence based 
decision-making. 


High quality data 
made available 

to support 
forecasting, 
strategy and policy 
development. 


Perception among the 
public that the Public 
Service is not transparent 
about how their data is 
shared. 


Public consultation for data 
sharing agreements and 

a register of data sharing 
agreements made available 
online will give the public 
visibility and access as to 
how their personal data is 
being shared. 


This represents a positive 
change towards openness 
and transparency. 


EU Law and Data Sharing in Ireland 


Due to the rapid developments in technology in recent years citizens are making more of their public 
information available. Where this information resides within Government there is an inherent duty of care to 
mind its collection, storage and transmission. 


The current approach by the EU to introduce modern wide spreading laws and regulations aims to put data 
at the heart of what Government does. It provides Member States with the ability to give data subjects more 
control over their personal data while also providing a level playing field for businesses. 


The use of uniform and up-to-date legislation such as the EU Data Governance and Data Acts is essential 
to guarantee the fundamental right of individuals while also allowing for the development of a strong digital 
economy; supported by a transparent data sharing environment. 


The ambitions of Government, whether they be economy, health, housing or climate commitments, will only be 
truly manageable through optimising the use of data. The publication of the Harnessing Digital - The Digital 
Ireland Framework aims to align EU priorities and national priorities; for example supporting ambitions to 
achieve climate targets with digitally sustainable solutions; it forces those that work with data to ask if we have 
truly identified all opportunities for using data to assist in tackling climate change. 


lreland’s welcoming of the EU Digital Decade shows the openness to use data to improve the life of the public. 
By committing to targets such as 100% of citizens having access to their medical records online and 80% of 
citizens using a digital identity, Ireland is contributing to a pan-European desire for valuable public services. 


lreland’s approach to using data with its focus on ethics and transparency, is being recognised as world leading 
and the efforts of the Data Governance Board will only endeavour to improve and bolster this stance. 
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Supportive Legislative Environment 


Open Data 
Directive 


The Open Data 
Directive provides 
common rules for 

a European market 
for government-held 
data and identifies 

a list of High Value 
Datasets to be 
published for free 


and available via API. 


European 
Data 
Strategy 


The European 
strategy for data 
aims at creating a 
single market for 
data that will ensure 
Europe's global 
competitiveness and 
data sovereignty. 


February 


yACVAG) 


Data 
Governance 
Act 


The EU Data 
Governance Act is 
intended to foster 
the availability of 
data by increasing 
trust in data 
intermediaries and 
strengthening data 
sharing across the 
EU and between 
sectors. 


November 


2020 


Data Act 


The Data Act 
clarifies who can 
create value from 
data and under 
which conditions. 


February 


2022 


Establishment of 
Data Governance 
Board and 
Committees 
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The Data Governance Board 


Establishment 


The Data Governance Board (the Board) was established by the Minister of Public Expenditure and Reform, 
Michael McGrath TD, under the Act, in December 2021. 


The formation of the Board was a key milestone in the implementation of the Public Service Data Strategy 
2021 - 2023 (Principle 8 - Data is effectively governed). It plays a pivotal role in delivery of a new framework 
for data governance across the Public Service. The Board is independent in the performance of its functions 
with support provided by the Data Governance Unit in the Office of the Government Chief Information Officer. 


The Data Governance Board is chaired by the Government Chief Information Officer, Mr. Barry Lowry. 
Currently there are ten members in place. 


Under the legislation, the Board has a clearly defined set of legal powers and obligations. The Board can: 


e Advise the Minister on the introduction of data management standards and guidelines 
e Promote and report on compliance with standards and guidelines 

e Advise the Minister on the prohibition of collection of certain data by public bodies 

e Advise the Minister on directing public bodies to share data under the Act 

e Advise the Minister on the designation and operation of base registries 


e Review all data sharing agreements under the Act 


O 
Rae 


Advise on Promote Review 


Prescribing of rules, e Compliance by government e Data Sharing Agreements 
procedures and standards bodies with the guidelines and make recommendations 


, ee that have been issued. if required 
Preparation of guidelines 


Monitoring of compliance 


The initial focus of the Board has been on the process of moving PSBs to the new framework for sharing data 
under the Act. 


In the future it will look at the longer term requirements for managing data ethically, taking into account best 
practices for data sharing and data governance across the Public Sector. The Board will work to allow the 
Government to apply data to generate public value, develop evidence based policies and be more responsive in 
the planning and provision of public services; in the context of EU and global developments. 


ae 
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Secretariat 


Research 
and 


Data PENIS Base 


Protection Registries 
and Ethics and NDI 


Technical Membership Equality and 


Inclusion 


Architecture ae 


colin Bray 


_araig Da 
¥ or leon | 


my Barry 7, 
az 
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Working Together 


Since its establishment, the Board has met six times. There are 
currently 10 members; each with a tenure of three years. 


ee ° Membership is designed to encompass a wide range of views 
/ ] = from across industry, academia, legal, societal representation and 
Z technical spheres in addition to the Public Service. The diverse 
ea experience and expertise of the Board will help Ireland become 
.o) a an exemplar and European leader in the use of data. 
° 


The Board endeavours to empower Public 
: Bodies to share data in a consistent and 
uniform manner by providing the governance 
processes for how data is accessed, collected, 
stored and transferred. 
Vv 


SS 
Core Values 


. e Ensure all personal data handled by the Public Service is 
O . collected, stored, processed and shared in a manner that puts 
A the right to privacy and data protection at the heart of how 
: all our digital services are designed and delivered. 


| : e Cut down on waste and duplication of efforts ensuring that 
o individuals and businesses do not have to supply the same 
° a information more than once to PSBs. 
= gee ; 


e Improve data management and access within and between 
PSBs to streamline and automate back office functions. 


= — 


0 Establishment of Committees 


Due to the nature and importance of the Boards work it was 
necessary to establish committees to assist them in their role. 
Each committee reports to the Board while undertaking relevant 
programmes of work. 


O.. 
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110 Data Sharing Committee 


The data sharing committee was established to advise the Board 
in relation to the: 


e Advising and promoting of compliance with data sharing 
rules, standards and procedures set by the Minister. 


e Reviewing Data Sharing Agreements. 


fe) a e Advising on the cataloguing of all data sharing within the 
gen Public Service. 


e Advising on opportunities for data sharing across the Public 
Service which will improve services and outcomes for 
citizens, businesses and the Public Service itself. 


The data sharing committee plays a key role in the review process 
for data sharing agreements submitted under the Data Sharing 
and Governance Act Framework. 


The committee will play a leading role in 
the introduction and promotion of rules, 
procedures, standards and guidelines for 
data sharing in the Public Service. 


cn 


Data Architecture and 
Technical Committee 


The Data Architecture & Technical committee will play a leading 
a) role in the introduction and promotion of technical guidelines and 
standards in the Public Service. 


: The committee will also drive and support the Public Service 
oO Data Strategy actions of a technical nature such as, Analytics, 
C GeoSpatial and Data Standards and Architecture including Base 
cadlae Registries. 


As part of this body of work it will be essential to develop 
frameworks and standards for datasets to enable data sharing 
across the entire Public Service; identifying and reusing existing 
frameworks where possible. 


« €@9 
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Hugh Mangan 


1°) 


John McDaid 


Owen Harrison 
Chair 


Dr Mihai Bilauca 
/ Martin Tully 


Teresa Maguire 


fe) 


Keith Redmond 


Oo 


Data Sharing 
Committee 
Membership 


fe) 


Fergus 
O'Cuanachain 


Francesca Kay 
Chair 


fe) 


. 


Oo 


Annette Denvir 


Elaine Quinn 


ie) 


Adam Egan 


Niall Sinnott / 
Peter Lennon 


Colin Bray 


Damien Quinn Data Architecture and Audrey Pender 
O Technical Committee 
Membership 


O--" 


Lorraine 
McNerney 


Dermot Corcoran 


Gurchand Singh 


Supporting an 
Efficient Data 
Eco-system 
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From its immediate establishment, the Board has communicated and engaged with stakeholders across the 
Public Service, to ensure that all PSBs are aware of their obligations under the Data Sharing and Governance 
Act 2019. 


Creating a Data Officer network 


While undertaking the design and introduction of the data sharing framework, it became clear that there was 
a gap across the Public Service for specific points of contact for data related issues. Recognising this gap and 
understanding that it could not impede on the role of data protection officers the establishment of a data 
officer network became key. 


There is a wealth of knowledge across the Public Sector in relation to data sharing. The management and 
development of the data officer network will allow the Board to leverage this knowledge to assist in the 
continuous improvement of data-management in the Public Service. 


There is a very sharp distinction between the roles played by the data officer and the data protection officer 
within the new framework for sharing data under the Act. The role of the data officer is to ensure that all 
guidelines within the data governance framework are adhered to within their organisation; they play a vital 
role in executing data sharing agreements from stage one right to the notification to the Minister for Public 
Expenditure and Reform. This will ensure that any data sharing entered into by their organisation goes through 
a robust and transparent process under the new framework. 


The data officer network is poised to take advantage of opportunities that will be rolled out from 
implementation of the Act and the Public Service Data Strategy; with members acting as an advocate for 
all initiatives around data management, data sharing and data governance in their organisation. The data 
governance unit will continue to work closely with the network and the Board to facilitate this. 


The data governance unit has supported this important network by rolling out a series of webinars around 
the framework, providing access to data governance resources online and the publication of a quarterly 
informational bulletin. The data governance unit will continue to provide this dedicated level of support for all 
data officers. 


As the work of the Board continues and the data officer network grows; the data officer will be the key 
stakeholder enabling PSBs to be aware of all initiatives, regulations and legislation (at a national and EU Level), 
and the impact that they will have on their organisation. This will allow them to identify how data can be shared 
and used to contribute to the overall policy map and the delivery of services; for the longer term. 


39 Data Officers across the Public Sector 


Data Governance Board 


Assisting with the transition 


The introduction of a widespread and complex piece of legislation has meant that it had touch points with 
other well established laws; namely the Data Protection Act 2018. 


Commencement of the final section (section 6) of the legislation, will see the Data Sharing and Governance Act 
2019 fully commenced. 


Commencement of this section will remove the legal basis for personal data sharing as defined in section 38 
of the Data Protection Act 2018. This means that any existing data sharing arrangements relying on section 
38 of the Data Protection Act 2018 as their legal basis for the disclosure of information from one public body 
to another must complete a data sharing agreement in alignment with the Data Sharing and Governance Act 
2019. 


This is needed unless there is another legal basis for the existing data sharing arrangement. 


Assisting public bodies with this transition to data sharing under the Act has required an extensive 
communications exercise to ensure that organisations are aware of their obligations. 


The exercise of organisations reviewing existing data sharing agreements has proved useful across the public 
sector; with some seeing it as an opportunity to reconsider their current data sharing arrangements, whilst at 
the same time readying themselves to transition to the Data Sharing and Governance Act 2019 as their legal 
basis for disclosure. 
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Developing supports for the Public Service 


A key role of the Board is to advise the Minister for Public Expenditure and Reform on the prescribing of rules, 
standards and guidelines to assist public bodies in complying with the Data Sharing and Governance Act 2019. 
As such, all publications issued were designed to be of use to the entire Public Service, whilst also guiding data 
officers and PSBs as they adhere to the legal obligations of the Act. 


All publications have focused on the use of plain English and are readily available online; thus providing 
complete transparency to citizens on the data sharing process and the role of the Data Governance Board. 


To assist our colleagues across the Public Service the Board initiated the following supports which provide 
public bodies with a common set of practices to follow when they wish to use the Act as their legal basis for 
data sharing. 


Building Governance 


Data Governance Board Review 


Recommendations to Lead PSB 


(i) 
AXA 


DSA Review Report 


Compliant with the DSGA 
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Data Sharing Playbook - this provides a complete step by step guide that organisations can 
follow if they need to understand how they should develop a data sharing agreement that is 


- aligned to the Act. 
O 


The playbook presents the legalities of the Act in a plain English and easy to follow manner. 


Data Sharing Guidelines - These Guidelines set out the new governance framework 
for data sharing under the Act. These, along with the Playbook guide organisations 
from preparation and drafting of the data sharing agreement, all the way through to 
implementation of the data sharing arrangement. Each stage is mapped out in these 
guidelines to ensure organisations understand the process along with their roles and 
responsibilities. 


c= 
nD 


Cz, 


They also provide detail on the public consultation phase of the review process. All 
publications are available online so that citizens can also fully understand the process. 


[" —_— | Data Sharing Agreement Template - this agreement provides the entire Public Service 


with a consistent, robust and transparent template when undertaking a data sharing 
arrangement. It adheres to the legal requirements of the Act. 


public bodies through the mandatory public notices and internal notifications required for 
the public consultation stage of the playbook; allowing for a uniform approach to these 


ay SU Communications suite - a suite of communication templates were developed to support 
: 
important steps in the process. 


The initial supports developed have already been positively accepted and used by organisations across the 
Public Service. It is just the beginning of the development of a portfolio of supports that guide public bodies 
through the sharing of personal data in a safe, transparent way leading towards delivery of more efficient public 
services. 


Advising the Minister of Public Expenditure and Reform 


In accordance with the Act, the Board play a pivotal role in advising the Minister of Public Expenditure and 
Reform of any recommendations they have in relation to the data sharing agreements that come before them 
collectively. 


The Board reviews the data sharing agreements and may seek further information from the PSBs and other 
relevant Ministers. The Data Sharing Committee review all agreements in advance and provide appropriate 
advice. They may also seek further advice from other established Committees if necessary. 


To see all data sharing agreements that been sent to 
the Board for review please visit the public consultation 


website on gov.ie. 


Establishment 
of the Data 
Governance Unit 
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Data Governance Unit 


The Data Governance Unit (DGU) was established in 2020, under the remit of the Office of the Government 
Chief Information Officer (OGCIO). The unit provides the Secretariat for the Board and also acts as Secretariat 
to the Minister of Public Expenditure and Reform for their responsibilities under the Data Sharing and 
Governance Act 2019. The unit provides support across the Public Service for all matters related to the Act. 


There are three sections within the Unit: 


e Data Policy 


e Data Governance Support 


e Data Analytics 


a 
Data Policy 1 
\ Z 


The Public Service Data Strategy 2019 - 2023 contains a number of data actions that will provide a 
transformative effect for the Public Service, and benefits to both citizens and businesses. Several of these call 
for the further and ongoing development of policy on how data is managed within the Public Service. To satisfy 
this requirement, the Data Policy section is responsible for the following: 


e Design and implementation of standards and guidelines for data management 
e Identification, designation and operation of Base Registries 
e EU Representation and Engagements 


e Policy Support 


Data Governance Support 


Due to the nature of the Board having no direct staff, it relies heavily on support functions in order to 
undertake its role, deliver data projects and general actionable work items. These support functions are 
provided by the Data Governance Support section. In addition to this, the Unit also delivers the following 
services: 


e Secretariat function 

e Reports and Research 

e Development of Compliance and Monitoring Framework 
e Engagement with PSBs and other relevant stakeholders 
e Communications 


e Support/Advice 
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<6) Data Analytics 
(ae eee 


Data Analytics is a process of inspecting, cleansing and transforming data with the goal of discovering useful 


information, informing conclusions, and supporting decision-making. The Data Analytics team are working on a 


range of projects that will ultimately lead to better management and analysis of data. 


e Reporting on, and analysing available datasets 
e Investigating the benefits of Virtual Data Rooms for the Public Service 


Data can play a pivotal role in evidence based policy making. Sharing and the accessing of data through 
reporting solutions can enhance operational efficiencies and respond to the ever-changing public need. 


Data Governance 
Unit 


Bernadette Dempsey 


Data Analytics 
Lead 


Audrey Pender 
Data Governance 
Support Lead 


Nuala Byrne 


Data Policy Lead 


Annette Denvir 


25 


Looking Forward 
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Looking Forward 


For the rest of 2022 the Board will be focusing on assisting PSBs to meet their legal obligations in advance of 
the final commencement of the Act. Outside of this work the Board is eager to progress a number of important 
initiatives that will further improve the quality and collective use of data by the Public Service; resulting in 
enhanced services for citizens. 


4 


a Development of Public Service data principles. 


Development of a data ethics framework. 


(Vv) Consideration of a compliance process that is appropriate and measured in relation to the 
ae Act. 


' Progression of virtual data spaces and base registries for use across the Public Service and 
I further afield in line with the forthcoming EU Data Act. 


Guidelines and standards that ensure PSBs feel supported in their duties of care for each 
stage of the data lifecycle. 


K Publication of a data strategy template that follows on from the release of the data maturity 
A assessment. 


| n ] Q| Help to further develop the Government's use of research and analytics. 


All valuable bodies of work that, when implemented will contribute to a scaffold system of supports, designed 
to outlive any strategy by embedding suitable practices for data management in the Public Service for years to 
come. 


Appendices 
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Appendix A - Data Governance Board Biographies 


Barry Lowry—Chair 


Barry Lowry has been the Chief Information Officer for the Irish Government 
since April 2016 with the primary task of taking forward the Government’s digital 
agenda. This includes developing the use of shared services, digital ID, digital 
services and data to better serve the people of Ireland and ensure that Ireland is 
well-placed to influence and exemplify the EU’s digital ambitions for 2030. 


Barry is also the Chief Adviser to Government on all Digital matters affecting the 
State and its citizens. 


Barry was previously the Director for IT Shared Services and Strategy and Head 
of the IT Profession within the Northern Ireland Civil Service. 


Colin Bray 


Colin Bray is Chief Executive Officer and Chief Survey Officer of Ordnance 
Survey Ireland (OSi), the national mapping agency. Colin has over twenty years’ 
experience in strategic geospatial information management and took up the 
position of CEO in 2013. The OSi provide the State’s definitive mapping and 
geospatial information services to support citizens, business and policy makers. 


Padraig Dalton (Observer) 


Padraig was appointed to the role of Director General of the Central Statistics 
Office (CSO) at the end of May 2012. Padraig is a career statistician having joined 
the CSO in 1991 and worked in most areas of the Office throughout his career. 


Angela Denning 


Angela Denning is the Chief Executive of the Courts Service where she leads an 
ambitious modernisation programme centred around digital delivery of services 
so as to improve access to justice. 


Joanne Geary 


Joanne is a senior leader with over 20 years’ experience leading transformative 
change in both public and private sector organisations. She holds several 
independent non-executive directorships and provides coaching to business 
leaders and their teams. She comes with a strong background in the establishment, 
operation and oversight of data registers and associated eco-systems. 


Joanne began her career as a statistician in the Central Statistics Office. She later 
specialised in strategy and change consultancy with PwC and IBM where she led 
enterprise-wide transformational projects in both Ireland and the UK. She also 
worked with UCD, providing commercial, strategic advisory and planning services 
to the Vice President for Research. 


Joanne holds both a BComm and MBS from University College Cork; post graduate 
Diploma in Commercial Law from the Law Society of Ireland; and post graduate 
Diploma in Business and Executive coaching from Leeds Beckett University. 
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Brendan Twomey 


Brendan J. Twomey was educated at CBS, Synge Street, Dublin, University 
College, Dublin and the University of Amsterdam. He was admitted as a Solicitor 
in 1978 and holds a Bachelor of Civil Law degree and a Diploma in the Legal 
aspects of European Integration. 


He is a past President of the Donegal Bar Association. He is a director and 
trustee of The Solicitor’s Benevolent Association. He was elected to the 
Council of the Law Society in 2008 and has served as Chair of the Curriculum 
Development Unit, Co-Chair of Law Society Finuas Skillnet and the Education 
Committee and The Law Society Guidance and Ethics Committee. 


Dr. Clare Thornley 


Clare Thornley has an MA in Philosophy from the University of Edinburgh and 
an MSc in Information Management and a PhD in Information Retrieval from 
the University of Strathclyde. She started her career as an Information Officer in 
the UK voluntary sector before completing her PhD and moving into research. 
Currently she works as a standards and ICT professionalism expert on a number 
of projects under the Digital Europe Programme. 


John McDaid 


John McDaid is the Chief Executive of the Legal Aid Board. Holding a degree in 
law, he qualified as a solicitor in 1988 and after working in private legal practice 
in Australia and Dublin he joined the Legal Aid Board (1993) where he has 
continued to work since. 


Dr. Aideen Hartney 


Dr Aideen Hartney became Director (Chief Executive) of the National Disability 
Authority (NDA) in mid-2020, having joined the organisation in 2016 as its Head 
of Policy, Research and Public Affairs. The National Disability Authority (NDA) 

is the independent statutory body, which provides evidence-based advice and 
research to Government on disability policy and practice and promotes Universal 
Design. (Universal Design involves the design of the built environment, products, 
services and information and communications technology (ICT) so that they 

can be accessed, understood and used by all, regardless of age, size, ability or 
disability). 


Barbara Ubaldi 


Barbara Ubaldi is the Head of the Digital Government and Data Unit in the 
Division on Open and Innovative Governments within the OECD Public 
Governance Directorate. 


Barbara leads the work on digital technologies and data to enhance openness, 
efficiency and innovation in governments. She is responsible for country 
reviews, for monitoring the implementation of the OECD Recommendation on 
Digital Government Strategies and for the OECD OURdata Index and Digital 
Government Index. 
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Appendix B - Data Sharing Playbook 


DSGA Data 


—_ 


An Roinn Caiteachais 
Phoibli agus Athchdirithe 
Department of Public 
Expenditure and Reform 


Sharing Playbook 


STAGE 1: Data Sharing Preparation 


What data needs to be shared? 


Data can be sourced 


: DSA cannot 
PSB-PSB sharing proceed 


any further 


Disclosing PSB has legal 
basis to collect data 


STAGE 2: Data Officers Review (All PSBs) 


Discuss what data can and cannot 
be shared and reach a consensus 


Data Officers inform 
relevant stakeholders 


STAGE 3: Preparing the Data Sharing Agreement (Lead PSB) 


Data Officer prepares DSA 
& DPO reviews 


Data Officer completes DSA & 
DPO signs DPO Statement 


DPO signs DPO Statement & 
Data Officer sends to DGU 


USEFULACRONYMNS 


PSB: Public Service Body 
DSA: Data Sharing Agreement 
DPO: Data Protection Officer 
DGU: Data Governance Unit 


SUMMARY 


Prerequisite 1 

To verify the personal data you require exists, check the 
Public Service Data Catalogue or confirm with the 
disclosing PSB. 


Prerequisite 2 
The data must be shared only between Public Bodies as 
defined in the Act. 


Prerequisite 3 
There must be a legal basis for the disclosing PSB to 
collect the personal data. 


SUMMARY 


Communication between the Data Officers’ of the PSBs 
involved is essential. The Data Officers from each PSB 
should agree that the requested data is data that, in 
accordance with the Data Sharing and Governance Act 
(DSGA), can be shared. 


Once a consensus has been reached the Data Officers 
involved inform the relevant stakeholders (authorised 
signatory and their DPO) about the proposed DSA, who 
is involved and who will take on the role of Lead PSB. 
The Lead PSB informs the Board of same, by emailing 
dgbsecretariat@per.gov.ie along with any special public 
consultation requirements. See DSGA Data Sharing 
Guidelines (the Guidelines) for a description template 
and more information about this stage. If consensus 
cannot be reached escalation can be made to the Board 
by the Lead PSB. 


SUMMARY 


Consideration should be given if a Data Protection 
Impact Assessment (DPIA) must be completed to 
support the DSA. Note that the DPIA may inform 
several sections of the DSA. Note also that where a 
DPIA has been carried out a summary must be included 
as part of the content of the DSA and where no DPIA 
was carried out, a summary of the reasons why must be 
included. 


A DSA is prepared by the Lead PSB’s Data Officer and 
their DPO reviews it before sending to the Other 
PSB/PSBs for completion. 


All sections of the DSA must be completed. All DPOs 
are required to sign a DPO statement (included in the 
DSA), once this is complete the Lead PSB will send a 
copy of the DSA to the DGU who will manage the 
public consultation process. 

Email: consultations.dsa@per.gov.ie. 
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E 4: Public Consultation (28 days) 


DGU publishes 
DSA & DPO statements cl is 
A ‘ publish a 
online for public notice 
consultation 


Submissions made 


Y 


DGU compiles submissions 


DGU submits compiled submissions 


to the Data Officers for review 


STAGE 5: PSBs Review (21 days) 


PSBs review submissions 


PSBs consult and may 
make amendments 


STAGE 6: Data Governance Board Review 


Committee 
Paes review and 
report 
findings 


The Board reviews and 
makes recommendations 


Recommendations include 
substantive issues 


STAGE 7: PSBs Address Recommendations & Sign 


Amendments require 
further review 


PSBs address all 
Boards recommendations 


2 €@9 


SUMMARY 


All data sharing agreements (including DPO statements) 
will be published online 
https://www.gov.ie/en/consultations/ and expire after 
28 days. 


All PSBs must publish, on the same date as the 
consultation, a notice on their website that they are 
proposing to enter into the DSA. They should state the 
documents that are accessible to the public and link to 
their relevant DSA and DPO statements published on 
the public consultations website. This notice should 
invite submissions and include the date of publication 
of the notice. See the Guidelines for more information 
and a Notice template. The Lead PSB must also notify 
the Board about these publications by emailing 
dgbsecretariat@per.gov.ie. 


The DGU will compile all submissions made from the 
public consultation process and feed them back to the 
relevant Data Officers from the PSBs involved. 


If there are no submissions the DGU will notify the Lead 
PSB about this and send the DSA to the Board for 
review. 


SUMMARY 


Each PSBs Data Officer will receive the compiled 
submissions from the DGU for review. 


The PSBs involved will consult on the submissions and 
may make amendments to the DSA. Once complete the 
Lead PSB will send the DSA to the Board for review. 


The Lead PSB has 21 days to submit the following to 

the Board: 

- Copy of the DSA (with amendments, where 

applicable) 

+ Relevant DPO statements (included in the DSA) 

+ DPIA summary, where one has been carried out 
(included in the DSA) 

+ Any information that the Board may require regarding 
submissions made through the public consultation 
process 


SUMMARY 


The Board's review may involve seeking information 
from the Lead PSB and consulting with relevant 
Ministers. 


The Board will seek appropriate advice from their Data 
Sharing Committee and may seek further advice from 
other established Committees. The DS Committee will 
review the DSA and advise the Board of their findings. 
Other relevant Committees will advise the Board on any 
aspect of the DSA as requested. 


Once the Board has completed their review and if 
substantive issues arise in their recommendations, a 
further review will be requested by the Board. If no 
further review is required by the Board, they will issue 
their recommendations to the Lead PSB to be 
addressed. 


SUMMARY 


PSBs may seek clarification from the Board on their 
recommendations. 


If there are amendments that contain substantive issues 
the amendments will be made and sent back to the 
Board for further review. 


The PSBs must ensure that all recommendations made 
by the Board are addressed, only then can the DSA be 
executed. 


Data Governance Board 


PSBs (authorised signatories) sign 


the DSA and DPO updates statement 


Publish 


ROLES AND RESPONSIBILITIES: 


LEAD PSB: 

The decision about who takes on the role of the Lead PSB is detailed in the 
Guidelines. The Lead PSB is responsible for notifying the Board of any specific 
public consultation requirements at stage 2 of the playbook. It is the Lead 
PSB’s Data Officer's responsibility to prepare the DSA for submission to the 
Other PSB’s. Once complete they will send the DSA to the DGU for public 
consultation which must include the relevant DPO statements. The Lead PSB 
will be required to publish, on the same date as the consultation, a notice on 
their website that they are proposing to enter into the DSA. They should state 
the documents that are accessible to the public and link to their relevant DSA 
and DPO statements published on the public consultations website. This 
notice should invite submissions and include the date of publication of the 
notice. Once the DSA has been executed they have 10 days to send to the 
Minister (DGU) and as soon as is practicable thereafter, publish a copy of the 
DSA on their website. 


OTHER PSB: 

The PSB that is the other party/parties to the Data Sharing Agreement is 
known as the “Other PSB”. The Other PSB contributes to the DSA throughout 
the Playbook process. It is their responsibility to publish, on the same date as 
the consultation, a notice on their website that they are proposing to enter 
into the DSA. They should state the documents that are accessible to the 
public and link to their relevant DSA and DPO statements published on the 
public consultations website. This notice should invite submissions and 
include the date of publication of the notice. 


DATA OFFICER: 

A Data Officer is an official from each PSB that serves as the main contact 
throughout the playbook process and for the lifetime of the DSA. The Data 
Officer will communicate with the Other PSBs Data Officers in relation to the 
DSA, coordinate the DSA locally and advise their relevant stakeholders 
(authorised signatory and DPO) about the proposed DSA and be responsible 
for publishing the DSA notice on their website. 


Data Sharing and Governance Act: 


Once all recommendations have been addressed the 
DSA will then be signed by each PSB’s authorised 
signatory and the DPO will update their DPO Statement 
(signed and dated). 


SUMMARY 


The Lead PSB's Data Officer will be responsible for 
sending the final executed DSA to the Minister (DGU) 
within the specified time (10 days). Email: 
dgbsecretariat@per.gov.ie. The DGU, on behalf of the 
Minister, will publish a list of documents the Minister 
has received. 


The Lead PSB will be responsible for publishing the final 
executed DSA on their website. 


The Board will publish the executed DSA and their 
recommendations on their website. 


SUMMARY 


The Lead PSB's Data Officer will be responsible for 
informing the Data Governance Board of any changes to 
the Data Sharing Agreement during the lifetime of the 
agreement. 


See the Guidelines for more detailed information on 
each stage of the Playbook. 


DATA GOVERNANCE UNIT (DGU): 

The Data Governance Unit in the Office of the Government Chief 
Information Officer (OGCIO) is the secretariat to the Board and acts as 
the secretariat to the Minister for their responsibilities in the DSA 
process. They are responsible for managing the public consultations 
process. 


DATA PROTECTION OFFICER (DPO): 

It is the Data Protection Officer’s responsibility to review the proposed 
agreement and sign a statement to that fact at public consultation 
stage (Stage 4) and execution stage (Stage 7). This statement confirms 
that they are satisfied that the DSA is compliant with Data Protection 
law and consistent with the GDPR. 


COMMITTEE: 

A Committee is set up by the Board to advise them on matters relative 
to the DSA. The Committee may review the DSA and report their 
findings back to the Board. 


DATA GOVERNANCE BOARD (THE BOARD): 

The Board reviews any escalations. The Board can establish their own 
Committees to advise them on relative matters to the DSA. The Board 
reviews all Data Sharing Agreements submitted to them and makes 
recommendations that will be sent to the Lead PSB and must be 
addressed. Once the DSA is executed their recommendations will be 
published online along with a copy of the DSA. 


AUTHORISED SIGNATORY: 

An Authorised Signatory has the role of accountability for the data 
sharing agreement and is a senior official within the PSB (Principal 
Officer/equivalent or above). 


SECURITY SPECIALIST: 


A security specialist has the role of reviewing the security measures 
outlined in the DSA and providing the relevant expert advice. 


The Data Sharing and Governance Act 2019 is found here: http://www.irishstatutebook.ie/eli/2019/act/5/enacted/en/print.html 
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